🛡️ Security

Backup Agent

Software installed on a server that reads its files, databases, and mailboxes and copies them to a backup destination. Because it must read everything, it runs with the highest privileges on the host and holds credentials to backup storage, making it a high-value target.

📚 Deep Dive

Learn Article

Why Backup Agents Deserve the Same Scrutiny as Domain Controllers

The software that can read and restore everything can also take everything. What a compromised backup agent gives an attacker, why it escapes review, and how to put it on the privileged asset list.

intermediate 5 min read

Back to Glossary